THABACHWEU LOCAL MUNICIPALITY 


Approved Software 

Policy 



The Thabachweu Local Municipality policies are statements of principles and practices dealing with the on¬ 
going management and administration of the Municipality's IT assets. These policies act as a guiding frame 
of reference for how the Municipality deals with everything from its day- to-day IT operational and support 
procedures to comply with security regulations and codes of practice. This "statement of purpose" will 
guide the actions to be taken to achieve that purpose. 
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1. Overview 

The Thabachweu Municipality's intentions for publishing an Approved Software policy is not to 
impose restrictions that are contrary to the Municipality's established culture of openness, trust and 
integrity. The Municipality is committed to protecting its employees, clients, and service providers 
from any illegal or damaging actions by individuals, either knowingly or unknowingly. 

2. Purpose 

The purpose of this document is to govern the use of illegal or unlicensed software on any 
equipment belonging to the Thabachweu Local Municipality. All employees and personnel that have 
access to the Thabachweu Local Municipality computer systems must adhere to the approved 
application policy in order to protect the security of the network, protect data integrity, and protect 
computer systems. Only software and applications that has been deemed safe by the security officer 
is allowed to be installed on the mobile computers, workstations and servers. 

3. Approved Software 
3.1. Servers 

The Thabachweu Local Municipality engaged with Microsoft in an Open License Agreement for the 
Operating Systems and Software Applications that will be used on the mobile computers, 
workstations and servers. This software enables the Municipality to perform its day to day 
functions and to provide a service to its clients both internally and externally. 


• Microsoft Agreement No: xx 

• Microsoft Windows Server 2008R2 Licenses: xx 

• Microsoft Windows Server Access Cals: xx 

• Microsoft Windows 7 Licenses xx 

• Office 2010 Professional Licenses xx 

3.1.1. Microsoft Operating System 


All the Thabachweu Local Municipality Servers will only be installed with Microsoft Windows Server 
2008R2 (64 Bit). The approved installation and configuration plan documents for Windows Server 
2008R2 must be closely followed when re-installing the operating system to ensure that the 
"standard server environment" is maintained at the Municipality. These documents form a part of 
the Business Continuity / Disaster Recovery plan. 
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3.1.2. Microsoft Software 

Only Microsoft Software, covered by the Open License Agreement and where there are sufficient 
licenses available are allowed to be installed on the Municipality's servers. 

Bit Defender 2010 anti-virus client will be installed on all servers as the anti-virus solution and is 
covered by the Microsoft Operating System License. 

Microsoft ForeFront TMG2010 is the approved proxy services (internet) for the Municipality. The 
installation and configuration of this application is documented and forms part of the Business 
Continuity / Disaster Recovery plan. 

Microsoft Desktop Deployment Kit 2012 and the Microsoft Automated Installation kit is the 
approved deployment solution for the Municipality. The installation and configuration of this 
application is documented and forms part of the Business Continuity / Disaster Recovery plan. 

No Microsoft Office Applications are allowed to be installed on any servers to ensure the high level 
of security of the servers. 

3.1.3. 3 rd Party Software 

Sebata FMS is the approved financial system for the Thabachweu Local Municipality. The 
installation and configuration of this application is documented and forms part of the Business 
Continuity / Disaster Recovery plan. 

Symantec Backup Exec is the approved and installed backup solution for the Municipality. The 
installation and configuration of this application is documented and forms part of the Business 
Continuity / Disaster Recovery plan. 

Nashua Form Scape is the approved and installed "consumer account" printing application for the 
Municipality. The installation and configuration of this application is documented and forms part of 
the Business Continuity / Disaster Recovery plan. 

Syntell is the approved electricity pre-paid system for the Municipality. The installation and 
configuration of this application is documented and forms part of the Business Continuity / Disaster 
Recovery plan. 

3.2. Mobile Computers 

The Microsoft Windows 7 Operating System can be deployed to any mobile computers or 
workstations that supports F12 network boot. The Windows Deployment Server can deploy the 
Windows 7 Operating System and all the approved software to the newly installed computer. 
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3.2.1. Operating System 

Microsoft Windows 7 Professional (32 Bit and 64Bit) is the approved Operating system for mobile 
computers. All the newly procured computers must be installed with Windows 7 Professional 
64Bit. The old computers running the 32Bit version of Windows 7 will be phased out over the next 
period in time. 

3.2.2. Preapproved Software 

• Microsoft Office 2010 Professional (32Bit and 64Bit) 

• Microsoft Project 2010 Professional (32Bit and 64Bit) 

• Microsoft Visio 2010 Premium (32Bit and 64Bit) 

• Symantec End Point protection (32Bit and 64Bit) 

• Adobe Acrobat Reader 

• Adobe Flash Player 

• DotNetFramework 4.0 (32Bit and 64Bit) 

• Pervasive SQL for Workgroups 

• Sebata FMS Application 

• Nero Burning Rom 

• Vendor software shipping with a new computer 

3.3. Workstations 

The Microsoft Windows 7 Operating System can be deployed to any mobile computers or 
workstations that supports F12 network boot. The Windows Deployment Server can deploy the 
Windows 7 Operating System and all the approved software to the newly installed computer 

3.3.1. Operating System 

Microsoft Windows 7 Professional (32 Bit and 64Bit) is the approved Operating system for 
workstation computers. All the newly procured computers must be installed with Windows 7 
Professional 64Bit. The old computers running the 32Bit version of Windows 7 will be phased out 
over the next period in time. 

3.3.2. Preapproved Software 

• Microsoft Office 2010 Professional (32Bit and 64Bit) 

• Microsoft Project 2010 Professional (32Bit and 64Bit) 

• Microsoft Visio 2010 Premium (32Bit and 64Bit) 
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• Symantec End Point protection (32Bit and 64Bit) 

• Adobe Acrobat Reader 

• Adobe Flash Player 

• DotNetFramework 4.0 (32Bit and 64Bit) 

• Pervasive SQL for Workgroups 

• Sebata FMS Application 

• Nero Burning Rom 

4. Software request 

All the Municipality's employees may operate any of the preapproved software programs on the 
Municipality's IT infrastructure. If an employee requires additional software or a 3 rd party application 
to perform their duties the can request in writing the required permission from the Thabachweu 
Local Municipality Security Officer. It is the sole discretion of the Thabachweu Security Officer to 
approve or decline the request. 

5. Licensing 

The Thabachweu Local Municipality will at all-time remain the accountable owner for all the software 
and applications installed on the Municipality's IT infrastructure. 

6. Exceptions 

This policy allows for a special exception to be made to this policy for specific employees depending 
on the required job function and the skills of the employee. Some reasons for exception include: 

• The employee may be the person who needs to test new applications on a test network, 
then on the main network. 

• The employee may be a developer that must run custom or self-developed applications in 
order to test their work. 

• Network administrators may be allowed the ability to operate and test new software. 

7. Corrective actions for non-policy compliance 

• Failure to comply with the guidelines stipulated in the Municipality's policies will result in the 
following corrective or disciplinary procedures. 

• The decisive action that will be taken against the employee is dependent on the severity level and 
the level of the security risk. 

• Warning from Management: 

o The employee receives a warning from their manager that they were in violation of policy. 
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• Written Warning in Personnel File 

o The employee is reprimanded, and official notice is put in their personnel file. This may 
have negative consequences during future performance reviews or promotion 
considerations. 

• Revoking Privileges 

o Access to certain resources, such as internet or email, can be revoked for a limited period 
providing that this action does not have a negative impact on the employee's job functions. 

• Training 

o Adequate training to create awareness and guidance on policy compliance. 

• Disciplinary action will be determined in compliance to Schedule 8 of the Labour Relations Act 66 of 
1995 or other related Public Service Regulations. 

8. Glossary and Abbreviations 


Please refer to the Thabachweu Glossary and abbreviations guide. 
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